02 NOV 2026 · 1 MIN
SECURITYEN
A malicious extension in Cursor: the supply chain reached developer tools
For roughly 11 hours, Cursor’s marketplace distributed tampered Claude Code extension builds for macOS and Windows. They attempted to install an SSH backdoor. Here is what to check and why the package source matters.
Read article